$ rpki-client -vvf repo-rpki.idnic.net/repo/612c138c-2e24-49f5-8ada-0027cba7f178/0/7A6E7FE39152D1CC174F6922143FAAEBDC95FAF5.mft File: 7A6E7FE39152D1CC174F6922143FAAEBDC95FAF5.mft (raw, json) Hash identifier: QAagBWfHu2acRc4pLcab04hNyTGC5K11F1n2KbKf6qk= Subject key identifier: 80:50:89:A6:52:4B:9C:55:D1:9D:22:57:13:A7:A0:4D:5E:5C:5A:33 Authority key identifier: 7A:6E:7F:E3:91:52:D1:CC:17:4F:69:22:14:3F:AA:EB:DC:95:FA:F5 Certificate issuer: /CN=7A6E7FE39152D1CC174F6922143FAAEBDC95FAF5 Certificate serial: 3B4BDC1A6ABE85C331BDF05EFF6FAED7C97D6F49 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7A6E7FE39152D1CC174F6922143FAAEBDC95FAF5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/612c138c-2e24-49f5-8ada-0027cba7f178/0/7A6E7FE39152D1CC174F6922143FAAEBDC95FAF5.mft Manifest number: 0307 Signing time: Sat 28 Jun 2025 05:00:48 +0000 Manifest this update: Sat 28 Jun 2025 04:55:48 +0000 Manifest next update: Tue 01 Jul 2025 05:31:48 +0000 Files and hashes: 1: 3130332e3137322e3234302e302f32342d3234203d3e20313432343031.roa (hash: 18AbUsVhIGEQ6HCFJXdnQ22A4WQNqI+V6DxuOgi205k=) 2: 3130332e3137322e3234312e302f32342d3234203d3e20313432343031.roa (hash: yN3b6aLARK75R5KMvUSuceVNjELLLGOMFIhCi2LU/yI=) 3: 7A6E7FE39152D1CC174F6922143FAAEBDC95FAF5.crl (hash: Ihe+GX7+eK1V75W4kY5+0AJQQC+5RG01aw+50mxBzrA=) 4: 3130332e3137322e3234302e302f32332d3233203d3e20313432343031.roa (hash: dQbf3sVA4jaVic2L+O9XI1H3j7ymjWLOW6r+meQnacg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/612c138c-2e24-49f5-8ada-0027cba7f178/0/7A6E7FE39152D1CC174F6922143FAAEBDC95FAF5.crl rsync://repo-rpki.idnic.net/repo/612c138c-2e24-49f5-8ada-0027cba7f178/0/7A6E7FE39152D1CC174F6922143FAAEBDC95FAF5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7A6E7FE39152D1CC174F6922143FAAEBDC95FAF5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 05:31:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:4b:dc:1a:6a:be:85:c3:31:bd:f0:5e:ff:6f:ae:d7:c9:7d:6f:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7A6E7FE39152D1CC174F6922143FAAEBDC95FAF5 Validity Not Before: Jun 28 04:55:48 2025 GMT Not After : Jul 1 05:31:48 2025 GMT Subject: CN=805089A6524B9C55D19D225713A7A04D5E5C5A33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:91:d2:48:dd:db:ce:6b:1c:63:79:e0:a8:ea: 7b:a0:25:4e:bd:25:2a:36:ab:4f:c2:8a:20:3d:6f: 6f:79:81:d8:98:ac:9a:65:a3:98:28:9a:01:8d:cf: a0:de:35:7c:10:8e:78:c9:8a:12:ec:f7:aa:7c:08: 5f:99:4e:2c:0a:c5:df:cd:c6:f8:67:ed:f1:23:fc: 76:f3:e7:19:58:11:1e:75:e5:ea:44:4f:62:84:0c: bb:1c:62:76:91:33:ec:69:97:6d:f2:ec:a9:2a:ca: dc:3c:09:d2:52:9e:8a:bf:ba:be:34:53:8b:a3:0f: c4:07:d2:3a:46:cb:96:7d:45:a8:80:fa:d2:06:a9: c1:d2:dd:8c:7a:ea:db:c6:bb:33:f5:63:04:03:53: 64:8f:21:58:52:f6:b6:5b:7c:a6:ec:a8:21:44:7a: 8d:1c:90:9c:8e:4a:47:a1:3f:56:36:d8:22:74:30: 84:f3:30:fa:5b:bd:87:05:58:db:65:05:f1:94:3b: 9f:42:95:de:b0:e8:94:d0:ed:d5:6b:33:99:7f:97: fd:55:dc:b9:14:01:dc:1f:18:2c:95:ed:c6:34:26: 80:4c:de:2c:76:84:5a:92:d2:4a:33:10:f2:00:f9: 11:99:86:68:99:57:6e:ae:55:a4:8a:e0:49:62:42: 22:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:50:89:A6:52:4B:9C:55:D1:9D:22:57:13:A7:A0:4D:5E:5C:5A:33 X509v3 Authority Key Identifier: keyid:7A:6E:7F:E3:91:52:D1:CC:17:4F:69:22:14:3F:AA:EB:DC:95:FA:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/612c138c-2e24-49f5-8ada-0027cba7f178/0/7A6E7FE39152D1CC174F6922143FAAEBDC95FAF5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7A6E7FE39152D1CC174F6922143FAAEBDC95FAF5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/612c138c-2e24-49f5-8ada-0027cba7f178/0/7A6E7FE39152D1CC174F6922143FAAEBDC95FAF5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:08:0a:3c:2a:35:81:48:12:9c:66:c0:3c:64:bc:21:e5:4f: e7:a0:0f:a9:22:be:2c:ae:59:6a:42:7d:49:c5:57:1c:8b:e5: 18:9f:55:8d:f7:d2:d1:41:54:b7:35:cf:64:71:1e:94:c1:b1: 4f:56:de:ef:8a:2b:26:d8:06:4e:8f:e5:7b:dc:ac:2f:42:e4: 2b:8d:1f:14:27:4b:8a:b7:8a:1c:68:d9:42:eb:32:f5:9f:f0: 8e:fb:bc:58:8f:2f:80:8b:52:d1:98:c4:8a:53:30:5e:16:88: 4b:cc:71:bc:f2:ca:a9:89:d0:2a:c5:51:32:00:c2:7d:5b:65: 1a:03:46:51:ee:28:8e:96:13:99:f4:0a:d7:f7:2b:17:09:09: 0c:4a:1c:8e:63:26:d5:3f:21:03:fb:46:f6:5a:17:e8:18:71: 8c:7c:6b:5c:e5:e3:b6:0a:3d:1e:55:72:8e:6f:03:cd:84:71: 75:e5:c5:63:45:ea:66:7c:96:25:67:cf:55:82:11:ce:f2:bc: 72:99:ef:cb:19:c0:85:49:75:9d:59:7a:76:be:64:e9:f9:f0: 77:ad:99:49:2d:a6:4e:79:16:f9:a9:e4:e9:51:f8:a8:b1:d0: 4c:a2:b6:46:13:78:d5:ba:e0:5e:71:01:5d:77:18:27:6d:c8: 53:1c:2c:04 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO0vcGmq+hcMxvfBe/2+u18l9b0kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0E2RTdGRTM5MTUyRDFDQzE3NEY2OTIyMTQzRkFBRUJE Qzk1RkFGNTAeFw0yNTA2MjgwNDU1NDhaFw0yNTA3MDEwNTMxNDhaMDMxMTAvBgNV BAMTKDgwNTA4OUE2NTI0QjlDNTVEMTlEMjI1NzEzQTdBMDRENUU1QzVBMzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2kdJI3dvOaxxjeeCo6nugJU69 JSo2q0/CiiA9b295gdiYrJplo5gomgGNz6DeNXwQjnjJihLs96p8CF+ZTiwKxd/N xvhn7fEj/Hbz5xlYER515epET2KEDLscYnaRM+xpl23y7Kkqytw8CdJSnoq/ur40 U4ujD8QH0jpGy5Z9RaiA+tIGqcHS3Yx66tvGuzP1YwQDU2SPIVhS9rZbfKbsqCFE eo0ckJyOSkehP1Y22CJ0MITzMPpbvYcFWNtlBfGUO59Cld6w6JTQ7dVrM5l/l/1V 3LkUAdwfGCyV7cY0JoBM3ix2hFqS0kozEPIA+RGZhmiZV26uVaSK4EliQiIBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgFCJplJLnFXRnSJXE6egTV5cWjMwHwYDVR0j BBgwFoAUem5/45FS0cwXT2kiFD+q69yV+vUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MTJjMTM4Yy0yZTI0LTQ5ZjUtOGFkYS0wMDI3Y2JhN2YxNzgvMC83QTZFN0ZFMzkx NTJEMUNDMTc0RjY5MjIxNDNGQUFFQkRDOTVGQUY1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0E2RTdGRTM5MTUyRDFDQzE3NEY2OTIyMTQzRkFBRUJEQzk1 RkFGNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjEyYzEzOGMtMmUyNC00OWY1LThh ZGEtMDAyN2NiYTdmMTc4LzAvN0E2RTdGRTM5MTUyRDFDQzE3NEY2OTIyMTQzRkFB RUJEQzk1RkFGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKcICjwqNYFIEpxmwDxkvCHlT+egD6kiviyu WWpCfUnFVxyL5RifVY330tFBVLc1z2RxHpTBsU9W3u+KKybYBk6P5XvcrC9C5CuN HxQnS4q3ihxo2ULrMvWf8I77vFiPL4CLUtGYxIpTMF4WiEvMcbzyyqmJ0CrFUTIA wn1bZRoDRlHuKI6WE5n0Ctf3KxcJCQxKHI5jJtU/IQP7RvZaF+gYcYx8a1zl47YK PR5Vco5vA82EcXXlxWNF6mZ8liVnz1WCEc7yvHKZ78sZwIVJdZ1Zena+ZOn58Het mUktpk55Fvmp5OlR+Kix0EyitkYTeNW64F5xAV13GCdtyFMcLAQ= -----END CERTIFICATE-----Generated at Sun Jun 29 23:59:47 2025 by rpki-client